Netgear FS728TLP Web Management User Guide - Page 311

ProSAFE FS526Tv2, FS726Tv2, and FS728TLP Smart Switches default deny all traffic rule that is the last rule of the MAC ACL table. (MAC ACL rules have a lower priority than IP ACL rules.) 2. Applying the ACL to an interface in the inbound direction. The smart switch allows ACLs to be bound to physical ports and LAGs. The smart switch supports MAC ACLs and IP ACLs. An example of each is provided in the following sections. MAC ACL Sample Configuration The following example shows how to create a MAC-based ACL that permits Ethernet traffic from the sales department on specified ports and denies all other traffic on those interfaces.  To create such a MAC-based ACL: 1. Select Security > ACL > Basic > MAC ACL. The MAC ACL screen displays. 2. Create an ACL with the name Sales_ACL for the sales department of your network. By default, this ACL is bound on the inbound direction, which means the smart switch examines traffic as it enters the port. For more information about creating named MAC ACLs, see Manage MAC ACL Names on page 197. 3. Select Security > ACL > Basic > MAC Rules. The MAC Rules screen displays. 4. Create a rule for the Sales_ACL with the following settings: Field or Menu ID Action Assign Queue Redirect Interface Match Every CoS Destination MAC Destination MAC Mask EtherType Key. EtherType User Value Source MAC Configuration Setting 1 Permit 0 Do not select False 0 01:02:1A:BC:DE:EF 00:00:00:00:FF:FF Do not enter Do not enter 02:02:1A:BC:DE:EF Configuration Examples 311